CWE-89 · SQL Injection (page 89)
Page 89 of 100 — CVEs classified under CWE-89, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7308 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown func… |
CVE-2024-7307 | Medium | 6.3 | 2024-07-31 | A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an u… |
CVE-2024-7306 | Medium | 6.3 | 2024-07-31 | A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of… |
CVE-2024-7290 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown part of the file /… |
CVE-2024-7289 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown… |
CVE-2024-7288 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an… |
CVE-2024-7287 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of… |
CVE-2024-7286 | High | 7.3 | 2024-07-31 | A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. This issue affects some unknown processing… |
CVE-2024-7283 | Medium | 6.3 | 2024-07-31 | A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.0. Affected by this issue is some unkno… |
CVE-2024-7282 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2024-7281 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /adm… |
CVE-2024-7280 | Medium | 6.3 | 2024-07-31 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-7279 | High | 7.3 | 2024-07-31 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-7278 | Medium | 4.7 | 2024-07-31 | A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team… |
CVE-2024-7276 | Medium | 4.7 | 2024-07-30 | A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-7275 | Medium | 4.7 | 2024-07-30 | A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/ca… |
CVE-2024-7274 | Medium | 4.7 | 2024-07-30 | A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of th… |
CVE-2024-7273 | Medium | 6.3 | 2024-07-30 | A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. T… |
CVE-2024-41944 | Medium | 6.5 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplayReport` API route inside the CMS. This… |
CVE-2024-41915 | High | 7.2 | 2024-07-30 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks… |
CVE-2024-41804 | Medium | 6.5 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS responsible for Adding/Editing DataSet… |
CVE-2024-41803 | Medium | 4.9 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. T… |
CVE-2024-41802 | High | 8.1 | 2024-07-30 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CMS responsible for Filtering DataSets. T… |
CVE-2024-6699 | Critical | 9.8 | 2024-07-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection… |
CVE-2024-41702 | Critical | 9.8 | 2024-07-30 | SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
CVE-2024-7224 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-7223 | Medium | 6.3 | 2024-07-30 | A vulnerability has been found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-7222 | Medium | 6.3 | 2024-07-30 | A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the fi… |
CVE-2024-7221 | Medium | 6.3 | 2024-07-30 | A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manage_user.php. T… |
CVE-2024-7220 | Medium | 6.3 | 2024-07-30 | A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin… |
CVE-2024-7219 | High | 7.3 | 2024-07-30 | A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-5975 | Critical | 9.1 | 2024-07-30 | The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action ava… |
CVE-2024-5765 | Critical | 9.8 | 2024-07-30 | The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availab… |
CVE-2024-37858 | Critical | 9.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/cat… |
CVE-2024-37857 | High | 8.8 | 2024-07-29 | SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categor… |
CVE-2024-6748 | High | 8.3 | 2024-07-29 | Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monit… |
CVE-2024-37906 | Critical | 9.9 | 2024-07-29 | Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in t… |
CVE-2024-7199 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file… |
CVE-2024-7198 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admi… |
CVE-2024-7197 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown func… |
CVE-2024-7196 | High | 7.3 | 2024-07-29 | A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unk… |
CVE-2024-7195 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin… |
CVE-2024-7194 | Medium | 6.3 | 2024-07-29 | A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processing of the file chec… |
CVE-2024-7191 | Medium | 6.3 | 2024-07-29 | A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functio… |
CVE-2024-7190 | Medium | 6.3 | 2024-07-29 | A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2024-7188 | High | 7.3 | 2024-07-29 | A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the co… |
CVE-2024-37381 | High | 8.0 | 2024-07-29 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary… |
CVE-2024-7202 | Critical | 9.8 | 2024-07-29 | The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to i… |
CVE-2024-7201 | Critical | 9.8 | 2024-07-29 | The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to i… |
CVE-2024-7168 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-7167 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2024-7166 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /re… |
CVE-2024-7165 | Medium | 6.3 | 2024-07-28 | A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2024-7164 | High | 7.3 | 2024-07-28 | A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-39304 | High | 8.8 | 2024-07-26 | ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an imp… |
CVE-2024-38872 | High | 8.3 | 2024-07-26 | Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module. |
CVE-2024-38871 | High | 8.3 | 2024-07-26 | Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the reports module. |
CVE-2024-40689 | Medium | 6.0 | 2024-07-26 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the att… |
CVE-2024-7119 | Medium | 6.3 | 2024-07-26 | A vulnerability, which was classified as critical, has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this issue i… |
CVE-2024-7118 | Medium | 6.3 | 2024-07-26 | A vulnerability classified as critical was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected by this vulnerability is an unkn… |
CVE-2024-7117 | Medium | 6.3 | 2024-07-26 | A vulnerability classified as critical has been found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. Affected is an unknown function of t… |
CVE-2024-7116 | Medium | 6.3 | 2024-07-26 | A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been rated as critical. This issue affects some unknown p… |
CVE-2024-7115 | Medium | 6.3 | 2024-07-26 | A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as critical. This vulnerability affects unk… |
CVE-2024-7114 | Medium | 6.3 | 2024-07-26 | A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part of the file /so.php. The manipulation… |
CVE-2024-7105 | Medium | 6.3 | 2024-07-25 | A vulnerability classified as critical has been found in ForIP Tecnologia Administração PABX 1.x. Affected is an unknown function of the file /detalheIdUra of… |
CVE-2024-38289 | Critical | 9.8 | 2024-07-25 | A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to… |
CVE-2024-7101 | High | 7.3 | 2024-07-25 | A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue affects some unknown processing of the… |
CVE-2024-7081 | Medium | 6.3 | 2024-07-24 | A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-41551 | Critical | 9.8 | 2024-07-24 | CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= . |
CVE-2024-41550 | High | 7.2 | 2024-07-24 | CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_invoice_items.php?id= . |
CVE-2024-7069 | Medium | 6.3 | 2024-07-24 | A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects some… |
CVE-2024-40502 | Critical | 9.8 | 2024-07-22 | SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click… |
CVE-2024-39250 | Critical | 9.8 | 2024-07-22 | EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface. |
CVE-2024-38788 | High | 7.6 | 2024-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This iss… |
CVE-2024-38773 | Critical | 9.3 | 2024-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows B… |
CVE-2024-38755 | High | 8.5 | 2024-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Designinvento DirectoryPress allows SQL Injection.This is… |
CVE-2024-38708 | High | 8.5 | 2024-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with In… |
CVE-2024-38692 | High | 7.6 | 2024-07-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injection.This… |
CVE-2024-6970 | Medium | 6.3 | 2024-07-22 | A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /staffcatadd… |
CVE-2024-6969 | Medium | 6.3 | 2024-07-22 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of… |
CVE-2024-6968 | Medium | 6.3 | 2024-07-22 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-6967 | Medium | 6.3 | 2024-07-22 | A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been classified as critical. This affects an unknown part… |
CVE-2024-6966 | High | 7.3 | 2024-07-22 | A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-6957 | High | 7.3 | 2024-07-21 | A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php… |
CVE-2024-6956 | Medium | 6.3 | 2024-07-21 | A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2024-6953 | Medium | 6.3 | 2024-07-21 | A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sm… |
CVE-2024-6952 | Medium | 6.3 | 2024-07-21 | A vulnerability has been found in itsourcecode University Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2024-6951 | Medium | 6.3 | 2024-07-21 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System 1.0. This affects an unknown part of the file ad… |
CVE-2024-6933 | Medium | 6.3 | 2024-07-21 | A flaw has been found in LimeSurvey 6.5.14-240624. Affected by this issue is the function actionUpdateSurveyLocaleSettingsGeneralSettings of the file /index.ph… |
CVE-2024-6497 | High | 8.8 | 2024-07-20 | The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including… |
CVE-2024-6906 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file add… |
CVE-2024-6905 | Medium | 6.3 | 2024-07-19 | A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file v… |
CVE-2024-6904 | Medium | 6.3 | 2024-07-19 | A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affects an unknown part of the file sort2_use… |
CVE-2024-6903 | Medium | 6.3 | 2024-07-19 | A vulnerability, which was classified as critical, has been found in SourceCodester Record Management System 1.0. Affected by this issue is some unknown functi… |
CVE-2024-6902 | Medium | 6.3 | 2024-07-19 | A vulnerability classified as critical was found in SourceCodester Record Management System 1.0. Affected by this vulnerability is an unknown functionality of… |
CVE-2024-6338 | High | 8.8 | 2024-07-19 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to time-based SQL Injection via the ‘exclude’ parameter in all versions up to, and including… |
CVE-2024-6901 | Medium | 6.3 | 2024-07-19 | A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. Th… |
CVE-2024-6900 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2024-6205 | Critical | 9.8 | 2024-07-19 | The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerc… |
CVE-2024-6899 | Medium | 6.3 | 2024-07-19 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |